AWS Terms Flashcards

1
Q

Amazon ______ is a managed NoSQL database service provided by Amazon Web Services (AWS) that supports key-value and document data structures. It is designed to handle a wide range of applications requiring scalability and performance, offering features such as in-memory caching, global replication, and real-time data processing.
______ is a fully managed and serverless NoSQL database that scales to support tables of virtually any size with automated horizontal scaling, and it is built to run high-performance, internet-scale applications that would overburden traditional relational databases.

A

DynamoDB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

______ is an automated vulnerability management service offered by AWS that continually scans AWS workloads for software vulnerabilities and unintended network exposure. It automatically discovers workloads such as Amazon EC2 instances, container images, and AWS Lambda functions, and scans them for vulnerabilities and network exposure in near-real time.

A

Amazon Inspector

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

AWS______ is a structured program that assists customers in strategic planning for large-scale events and provides real-time support during critical moments. It includes architectural reviews with AWS Solutions Architects, risk assessment and mitigation planning, and an operational readiness review to ensure workflows are well-architected. ______ has been replaced by AWS Countdown, which offers critical support across all phases of cloud projects from design to post-launch retrospectives, including designated engineers who provide proactive guidance and troubleshooting. AWS Countdown Premium is available for Business Support, Enterprise On-Ramp, and Enterprise Support customers as a monthly subscription for an additional fee.

A

Infrastructure Event Management (IEM)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

______ is a fully managed message queuing service provided by Amazon Web Services (AWS) that enables the decoupling and scaling of distributed systems, microservices, and serverless applications.
It allows applications to send messages to queues and then deliver them to other parts of the application for processing in a microservice architecture.
______ is designed to decouple and scale microservices, distributed systems, and serverless applications, offering a reliable, highly scalable, hosted queue for storing messages in transit between applications or microservices.

A

Amazon Simple Queue Service (SQS)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What does Amazon SQS stand for?

A

Amazon Simple Queue Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

______ is a service provided by Amazon Web Services (AWS) that automatically distributes incoming application traffic across multiple targets to ensure high availability, automatic scaling, and robust security.
It helps maintain efficient and reliable applications by distributing traffic across several servers, improving performance, reliability, and availability.
______ includes three types: Application Load Balancer, Network Load Balancer, and Gateway Load Balancer, each designed to handle different types of traffic and optimize resource use.

A

Amazon Elastic Load Balancer (ELB)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What does Amazon ELB stand for

A

Amazon Elastic Load Balancer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

______ is a serverless computing service provided by Amazon as part of Amazon Web Services. It enables developers to run code without provisioning or managing servers, executing code in response to events and automatically managing the computing resources required by that code.
This service supports event-driven applications triggered by various events such as HTTP requests, DynamoDB table updates, or state transitions.
______ was introduced on November 13, 2014, and it runs code on high availability compute infrastructure, performing all the administration of compute resources including server and operating system maintenance, capacity provisioning, and automatic scaling.

A

AWS Lambda

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

______ is a cloud storage solution provided by Amazon Web Services (AWS) that offers scalable, high-speed, web-based storage.
It is designed to store any type of data, from websites to mobile applications, and supports various use cases including data lakes for big data analytics, data archiving, and backups.
Data in ______ is organized into objects, which are stored in containers called buckets, and each object is identified by a unique key.
______ provides high durability, availability, and performance, making it suitable for frequently accessed data that needs to be delivered with low latency and high throughput.

A

Amazon S3, (Simple Storage Service)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

______ is a fully managed in-memory data store and caching service provided by Amazon Web Services (AWS) designed to improve the performance and scalability of applications by storing frequently accessed data in memory, reducing the need to fetch it from a database or other data sources.
It simplifies the deployment, operation, and scaling of an in-memory cache environment, making it easy to set up and manage without the complexity of setting up and maintaining a distributed cache environment.
______ supports three in-memory caching engines: Valkey, Memcached, and Redis OSS, allowing applications to work seamlessly without any code changes.
It offers fast access to data, typically providing microsecond latency, which significantly enhances application performance and reduces database load.

A

Amazon ElastiCache

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What does AWS WAF stand for?

A

AWS Web Application Firewall

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

______ is a security tool provided by Amazon Web Services (AWS) designed to protect web applications from various cyber threats such as SQL injection, cross-site scripting (XSS), and Distributed Denial-of-Service (DDoS) attacks.
It helps to control access to web applications by allowing or blocking web requests based on specific criteria, such as IP addresses, HTTP headers, and body content.
______ can be deployed on Amazon CloudFront, Application Load Balancer, Amazon API Gateway, AWS AppSync, Amazon Cognito, AWS App Runner, or AWS Verified Access to monitor and filter traffic, ensuring that only legitimate requests reach your application.

A

AWS WAF (Web Application Firewall)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

______ is a content delivery network (CDN) service operated by Amazon Web Services (AWS) designed to deliver content with low latency and high data transfer speeds.
It operates as a globally distributed network of proxy servers that cache content closer to users to improve access speed and reliability.
______ supports both static and dynamic content delivery and can be customized extensively.
It competes with other CDN providers such as Akamai, Azion, Cloudflare, and Edgio.

A

Amazon CloudFront

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What does Amazon ECS stand for?

A

Amazon Elastic Container Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

______is a fully managed container orchestration service provided by Amazon Web Services (AWS) that simplifies the deployment, management, and scaling of containerized applications. It enables developers to run applications in the cloud without the need to configure an environment for the code to run in, and it supports Docker containers, making it easier to deploy and manage applications across EC2 instances or on a serverless compute plane with AWS Fargate.

______ maintains application availability and allows you to scale your containers up or down to meet your application’s capacity requirements. The service is integrated with various AWS features such as Elastic Load Balancing (ELB), Virtual Private Cloud (VPC), Identity and Access Management (IAM), Application AutoScaling, Amazon CloudWatch, and Amazon Elastic File System (EFS), reducing the need for developers to build or maintain generalized abstractions.

A

Amazon ECS Amazon Elastic Container Service)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

______ is a set of rules used to control network traffic and reduce network attacks by filtering traffic based on defined rules. These rules can allow or deny access to a network, acting as a firewall for controlling traffic in and out of a subnet.
______ are applied to network interfaces and operating systems to manage access to directories or files and to control user access and enhance security across the network.
They provide instructions to switches and routers regarding the types of traffic allowed to interface with the network.

A

A network access control list (ACL)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What does ACL stand for?

A

A (Network) Access Control List

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

______ are strategically positioned data centers in the AWS network designed to deliver content with minimal latency. They are located closer to end-users, often in major cities, to ensure faster and more efficient content delivery. ______ are part of the global infrastructure, distributed worldwide to ensure content is available to users regardless of their geographical location.

These locations are used by services like Amazon CloudFront, AWS Global Accelerator, and Amazon Route 53 to cache content and process requests, thereby reducing the load on origin servers and minimizing data transfer costs.
They are particularly important for applications where low latency is crucial, such as content delivery networks (CDNs) and DNS services.

A

Edge Locations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

______ is a cloud storage solution provided by Amazon Web Services (AWS) that offers scalable, high-speed, web-based storage.
It is designed to store any type of data, from websites to mobile applications, and supports various use cases including data lakes for big data analytics, data archiving, and backups.
Data in ______ is organized into objects, which are stored in containers called buckets, and each object is identified by a unique key.
______ provides high durability, availability, and performance, making it suitable for frequently accessed data that needs to be delivered with low latency and high throughput.

A

Amazon S3, (Simple Storage Service)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

______ is a type of cloud storage that divides data into fixed-sized blocks, each with its own unique identifier, allowing for quick and efficient data retrieval.
This storage method is preferred for applications that require high performance and fast data access, such as databases and virtual machine file systems.
______ systems do not rely on a file system for data access, making them more direct and faster compared to file storage.
Cloud platforms like AWS and Azure offer ______ services, which are widely used in cloud computing and virtualization environments.

A

Block Storage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

______ is a scalable and fully managed file storage service provided by Amazon Web Services (AWS). It allows you to easily set up and configure a distributed file system that can be accessed concurrently by multiple instances within your AWS Virtual Private Cloud (VPC).
______ is designed to provide scalable and shared file storage for AWS cloud services and on-premises resources, acting as a persistent storage solution that can be accessed from multiple EC2 instances concurrently, allowing applications to share and collaborate on data in real-time.
It supports the Network File System version 4 (NFSv4) protocol, ensuring seamless integration with applications and tools.

A

Amazon Elastic File System (EFS)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

______ is an online file storage web service designed for long-term storage of data that is infrequently accessed and for which retrieval latency times of 3 to 5 hours are acceptable.
It is part of the Amazon Web Services suite of cloud computing services and is optimized for infrequently used data.

______ works together with Amazon S3 lifecycle rules to help automate the archiving of S3 data and reduce overall storage costs.
It provides an average annual durability of 99.999999999% for an archive and synchronously stores data across multiple Availability Zones before confirming a successful upload.

A

Amazon S3 Glacier

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What does Amazon EKS stand for?

A

Elastic Kubernetes Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What does Amazon ECS stand for

A

Elastic Container Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

______ containers are isolated environments that bundle an application with all its dependencies, ensuring consistent performance across different settings.
They are instances of ______ images, which are read-only templates that define the environment and operations of the container.
Containers share resources from the host machine rather than allocating resources to each virtual machine, making them more efficient and lightweight compared to virtual machines.
______ containers are more portable and efficient because they virtualize the operating system instead of hardware, allowing them to run on any ______ host regardless of the host’s operating system.

Containers are self-contained, isolated, and independent, meaning each container runs as an isolated process in user space and does not rely on pre-installed dependencies on the host machine.
They are particularly useful for deploying microservices architecture, where applications are broken into a collection of independent, loosely coupled services.

A

Docker

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

______ is a managed service offered by Amazon Web Services that simplifies the deployment and scaling of web applications and services in the cloud.
It handles the deployment details of capacity provisioning, load balancing, auto-scaling, and application health monitoring, allowing developers to focus more on writing code rather than managing the underlying infrastructure.
______ supports several programming languages and development stacks, including Java, .NET, PHP, Node.js, Python, Ruby, Go, and Docker.
It automatically provisions and operates the infrastructure and manages the application stack for you, so you don’t have to spend time or develop the expertise needed for server management.

A

AWS Elastic Beanstalk

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

______ is a serverless computing service provided by Amazon Web Services (AWS) that allows developers to run code without provisioning or managing servers. It executes code in response to events and automatically manages the computing resources required by that code, including server and operating system maintenance, capacity provisioning, and scaling.

Developers can write and upload code as a .zip file or container image, and ______ will automatically respond to code execution requests at any scale, from a dozen events per day to thousands of requests per second. The service charges users only for the compute time they use, by the millisecond, rather than provisioning infrastructure upfront for peak capacity.

A

AWS Lambda

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

______ is a serverless compute engine for containers that allows you to run applications without managing the underlying infrastructure. It automates the deployment and management of containerized applications, ensuring the right amount of computing is always available to run your containers.
______ abstracts away the server and cluster management, enabling developers to focus on their applications rather than the infrastructure.
It integrates with other AWS services such as Amazon Elastic Container Service (ECS) and Amazon Elastic Kubernetes Service (EKS), and supports both Linux and Windows containers.

______ scales automatically based on incoming traffic and provides built-in security features, including isolation between containers and secure communication.
It operates on a pay-as-you-go model, where you only pay for the resources you use, and it eliminates the need for server management, including provisioning, scaling, and patching.

A

AWS Fargate

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

______ is a highly available and scalable cloud Domain Name System (DNS) web service by Amazon Web Services (AWS) since 2010.
It simplifies the process of managing domain names and routing end-user requests to infrastructure in AWS or other locations, acting like the internet’s phonebook to translate domain names into IP addresses.
______ supports full, end-to-end DNS resolution over IPv6 and allows users to reach AWS services and non-AWS infrastructure, as well as monitor the health of their applications and endpoints.

A

Amazon Route 53

30
Q

______ is a web service that helps you securely control access to AWS resources. With ______, you can manage permissions that control which AWS services and resources users can access. You use ______ to control who is authenticated (signed in) and authorized (has permissions) to use resources. ______ provides the infrastructure necessary to control authentication and authorization for your AWS accounts. When you create an AWS account, you begin with one sign-in identity that has complete access to all AWS services and resources in the account. This identity is called the AWS account root user and is accessed by signing in with the email address and password that you used to create the account. We strongly recommend that you don’t use the root user for your everyday tasks. Safeguard your root user credentials and use them to perform the tasks that only the root user can perform.

A

AWS Identity and Access Management (IAM)

31
Q

What does IAM stand for?

A

Identity and Access Management

32
Q

______ is a cloud-based service offered by Amazon Web Services (AWS) that provides user sign-up, sign-in, and access control for web and mobile applications.
It simplifies the process of adding sign-up, sign-in, and access control to web and mobile applications, allowing developers to focus on building applications without worrying about the complexities of user management.
______ helps developers create branded customer experiences, improve security, and adapt to user needs by supporting login with social identity providers and passwordless login using WebAuthn passkeys or SMS and email one-time-passwords.

A

Amazon Cognito

33
Q

______ is a service provided by Amazon Web Services (AWS) that offers a centralized repository for accessing compliance-related documentation, certifications, and agreements. It provides on-demand access to AWS security and compliance documents, such as audit reports, SOC reports, and other documents that demonstrate the security and compliance of AWS services and infrastructure.
______ enables customers to review and download these documents to demonstrate their own compliance with various regulations and standards, including PCI DSS, HIPAA, and GDPR.
Additionally, ______ allows users to manage agreements with AWS, such as reviewing, accepting, and tracking the status of agreements for individual accounts or multiple accounts within an organization.

A

AWS Artifact

34
Q

What does AWS KMS stand for?

A

Key Management Service

35
Q

______ is a managed service provided by Amazon Web Services (AWS) that allows companies to create, control, and manage the cryptographic keys used to encrypt and protect their data.
It simplifies the creation and control of encryption keys used for securing data and is integrated with other AWS services like Amazon EBS, Amazon S3, and Amazon RedShift to simplify the encryption of data within these services.
______ also enables automatic key rotation and auditing of key usage, ensuring compliance and security.

A

AWS Key Management Service (KMS)

36
Q

______ is a fully managed service that provides protection against Distributed Denial of Service (DDoS) attacks for applications running on AWS.
It offers two tiers of security: ______ Standard and ______ Advanced. ______ Standard is automatically enabled for all AWS customers at no additional cost and provides protection against common and frequently occurring network and transport layer (layer 3 and 4) attacks.
______ Advanced is an optional paid service that provides enhanced protections against more sophisticated and larger attacks.
Both tiers provide dynamic detection and automatic inline mitigations to minimize application downtime and latency without the need to engage AWS Support.

A

AWS Shield

37
Q

______ is a detailed dataset that provides a comprehensive view of your AWS billing data, breaking down costs and usage by hour, day, or month, by product or product resource, or by tags that you define yourself.
It enables you to export your cost and usage data to an Amazon S3 bucket for further analysis and longer retention.
AWS delivers the export to your bucket at least once a day as either a CSV or Parquet file, allowing you to process the export using analytics tools such as Amazon Athena or Amazon Redshift, or spreadsheet applications like Microsoft Excel.
The ______ also supports Cost Categories and Cost Allocation Tags, providing a wide range of time granularities, including hourly, daily, and monthly.

A

The AWS Cost and Usage Report (CUR)

38
Q

______ is a cloud financial management tool that allows you to set custom cost and usage budgets and receive alerts when your forecasted or actual usage exceeds the defined thresholds.
It helps organizations monitor their AWS usage and forecast costs based on historical usage data, enabling proactive financial management and control.

With ______, you can:

Set budgets across daily, monthly, quarterly, or annual time periods and create budget limits accordingly.
Create custom actions that automatically trigger when the budget is met, such as stopping or modifying AWS resources or invoking AWS Lambda functions.
Monitor and receive notifications on your budgets free of charge, and your first two action-enabled budgets are also free per month.
______ integrates with various AWS services, including AWS Cost Explorer and AWS Chatbot, to deliver ______alerts in a designated Slack channel or Amazon Chime room.
It supports up to 20,000 budgets and allows you to create up to five alerts per budget, each alert can be sent to 10 email subscribers and/or be published to an SNS topic.

A

AWS Budgets

39
Q

______ is a tool provided by Amazon that helps users visualize, understand, and manage their AWS costs and usage over time. It offers an intuitive interface with charts and reports to explore detailed cost and usage data, allowing users to filter and group data by attributes like service, region, and linked accounts. ______ also provides forecasting capabilities to predict future costs based on historical data, aiding in budgeting and financial planning. Users can access their data with daily or monthly granularity, and even enable hourly and resource-level granularity for more detailed analysis.

A

AWS Cost Explorer

40
Q

What does AWS CUR stand for?

A

AWS Cost and Usage Report

41
Q

______ is a service provided by Amazon Web Services (AWS) that helps you assess, audit, and evaluate the configuration of your AWS resources. It provides a detailed inventory of your AWS resources and their current configurations, records configuration changes, and allows you to automate the evaluation of recorded configurations against desired configurations.

______ continuously monitors and records your AWS resource configurations and allows you to review changes in configurations and relationships between AWS resources. It also enables you to dive into detailed resource configuration histories and determine your overall compliance against the configurations specified in your internal guidelines.

This service can be used to enforce compliance with governance frameworks such as PCI DSS, SOC 2, SOC 3, and others.

A

AWS Config

42
Q

______ is a monitoring and observability service provided by AWS that helps users monitor and manage their AWS resources, applications, and services. It collects and tracks metrics, logs, and events to provide data and actionable insights for monitoring performance, optimizing resource utilization, and maintaining application health.

______ enables real-time monitoring of AWS resources such as EC2 instances, EBS volumes, Elastic Load Balancers, and RDS instances, among others. It automatically collects default metrics and also allows users to specify additional metrics to monitor, such as memory usage, transaction volumes, or error rates.

Key features of ______ include metric collection, dashboards, alarms, logs, and events for real-time monitoring and automated responses. It integrates seamlessly with more than 70 AWS services, allowing for simplified monitoring and scalability.

A

Amazon CloudWatch

43
Q

______ is a cloud computing feature that enables an application to automatically adjust its resources, such as servers and compute instances, based on real-time demand. It increases computing power or storage resources available for applications when loads increase and reduces it when no longer needed.
This service monitors application performance and scales AWS services resource capacity automatically, optimizing for availability, cost, or both.
______ can be used with applications that rely on multiple AWS services that can scale, and it can predict application resource demand and create and provision capacity accordingly.

A

AWS Auto Scaling

44
Q

The ______ is a service in the cloud that provides a consistent process for measuring your architecture using AWS best practices.
It assists with documenting the decisions you make, provides recommendations for improving your workload based on best practices, and guides you in making your workloads more reliable, secure, efficient, and cost-effective.
The tool is available at no cost in the AWS Management Console and helps you review the state of your workloads, compares them to the latest AWS architectural best practices, and offers suggestions to improve them.
It also supports integrations with AWS Trusted Advisor and AWS Service Catalog AppRegistry, which helps you more easily discover the information needed to answer ______ review questions and shortens your review time.

A

AWS Well-Architected Tool

45
Q

______ is a service provided by Amazon AWS that enables governance, compliance, risk audit, and operational audit of your AWS infrastructure. It records a near-to-real-time record of all AWS API calls and ______ events that took place within the AWS account, including changes made to the AWS account itself.
This service helps organizations investigate suspicious activity, troubleshoot operational issues, and meet their compliance requirements.
______ is operational in your AWS account by default and doesn’t require manual setup.

A

AWS CloudTrail

46
Q

______ is a cloud computing service model where a cloud services vendor provides computing resources such as storage, network, servers, and virtualization over the internet. This service allows users to run their applications and IT systems without maintaining their own data center. Users are responsible for deploying, maintaining, and supporting their applications and the operating system, while the ______ provider manages the physical infrastructure, including hardware, storage, and networking resources. ______ offers scalability, flexibility, and cost efficiency, allowing users to pay only for the resources they use and scale up or down as needed

A

Infrastructure as a Service (IaaS)

47
Q

What does IaaS stand for?

A

Infrastructure as a Service

48
Q

______ is a cloud computing model where a third-party provider delivers hardware and software tools to users over the internet, enabling developers to build, run, and manage applications without managing the underlying infrastructure such as servers, operating systems, and storage.
______ provides a complete development and deployment environment in the cloud, including everything from servers and operating systems to middleware software, user interfaces, and additional services like workflow, directory, security, and scheduling.
This model allows developers to focus on coding and application logic rather than infrastructure management, offering benefits like cost savings, faster development cycles, and easier scalability.

A

Platform as a Service (PaaS)

49
Q

What does PaaS stand for?

A

Platform as a Service

50
Q

______ is a cloud-based software distribution model where applications are hosted by a provider and made available to users over the internet.
Users typically access these applications through a web browser or a mobile app, and they subscribe to the service on a recurring basis rather than purchasing and installing the software on their devices.
This model allows users to focus on utilizing the software without having to manage the underlying infrastructure or perform maintenance.
Examples of ______applications include online email services like Gmail and Office 365, as well as advanced IT tools and personal entertainment services like Netflix.

A

Software as a Service (SaaS)

51
Q

What does SaaS stand for?

A

Software as a Service

52
Q

______ are JSON permissions policy documents that control what actions an identity (users, groups of users, or roles) can perform, on which resources, and under what conditions.
These policies can be further categorized into managed policies and inline policies. Managed policies include AWS managed policies and customer managed policies. AWS managed policies are created and managed by AWS, while customer managed policies are created and managed in your AWS account, providing more precise control over your policies than AWS managed policies.

______ grant permissions to an identity, dictating whether the identity to which this policy is attached is allowed to make API calls to particular AWS resources or not.
For example, a ______ might allow a user to invoke any Get or List request on any S3 resource.

These policies are used to manage permissions for individual users or groups within your AWS account, granting or restricting access to AWS resources based on the identity of the user or group.

A

AWS Identity-Based Policies

53
Q

______ are attached to resources and grant permissions to the principal specified in the policy. These policies are commonly used with Amazon S3 buckets, Amazon SQS queues, VPC endpoints, AWS Key Management Service encryption keys, and Amazon DynamoDB tables and streams.

For example, a ______ can be attached to an Amazon S3 bucket to allow members of a specific AWS account to perform any Amazon S3 actions in that bucket.
______ are inline policies and are therefore unmanaged.

______ are particularly useful when you need to restrict access to resources based on certain conditions of the request or when an AWS service needs access to the resource, such as CloudFront needing to access an S3 bucket to update the associated distribution.

A

AWS resource-based policies

54
Q

______ is a feature designed to prevent unintended public access to S3 buckets and objects. It acts as an additional layer of protection, ensuring that buckets and objects remain private by default and preventing public access through access control lists (ACLs) and bucket policies unless explicitly allowed.

This feature can be configured at both the account level and the bucket level. When enabled at the account level, it applies to all current and future buckets in the account, overriding any public access settings on individual objects.

______ helps secure data by blocking public access settings that could inadvertently expose data. It checks policies to determine if they grant public access and blocks updates to policies that would make a bucket public.

A

Amazon S3 Block Public Access

55
Q

AWS ______ is a network service used to connect to AWS services hosted by other AWS accounts or AWS Marketplace securely and privately.
It provides a way to access services across VPCs (Virtual Private Clouds) using private IP addresses, keeping traffic within the AWS network and preventing exposure to the public internet.
This service allows for private connectivity between your VPC and services hosted in another VPC, enabling secure access to services without the need for internet gateways, NAT devices, or direct connections.

A

PrivateLink

56
Q

AWS ______ is a managed service provided by Amazon Web Services (AWS) that serves as a central hub for connecting various virtual private clouds (VPCs) and on-premises networks. It simplifies network architecture by centralizing availability and routing, making it easier to manage traffic and connections within and across AWS accounts.
This service uses a hub-and-spoke model to route all traffic to and from each VPC or VPN, and it allows for efficient and flexible connectivity and routing within AWS and for hybrid cloud scenarios.

A

Transit Gateway

57
Q

Amazon ______ is a Domain Name System (DNS) service that provides both authoritative and recursive DNS resolution. It allows users to register domains, route internet traffic to their resources, and check the health of their web applications. For DNS resolution, ______ includes a feature called ______Resolver, which performs recursive lookups for names hosted in Amazon Elastic Compute Cloud (EC2) instances and public names on the internet.

58
Q

Amazon ______ consists of:
* Fast, global and secure CDN service
* Global network of edge locations and Regional edge caches
* Self-service model
* Pay-As-You-Go Pricing

A

CloudFront

59
Q

What does CIDR stand for?

A

Classless Inter-domain Routing

60
Q

What does OSI model stand for?

A

Open Systems Interconnection Model

61
Q

An ______ is a scalable, redundant, and highly available VPC component that allows communication between instances in your VPC and the internet. An ______ serves two purposes: to provide a target in your VPC route tables for internet-routable traffic, and to perform network address translation for instances that were assigned public IPv4 addresses. To make a subnet public, you attach an______ to your VPC and add a route to the route table to send non-local traffic through the ______ to the internet (0.0.0.0/0).

A

Internet gateway

62
Q

A ______ enables instances in a private subnet to connect to the internet or other AWS services, but prevents the internet from initiating a connection with those instances. To create a ______, you must specify the public subnet in which the ______ should reside. You must also specify an Elastic IP address to associate with the ______ when you create it. After you create a ______, you must update the route table that is associated with one or more of your private subnets to point internet-bound traffic to the ______. Thus, instances in your private subnets can communicate with the internet. You can also use a NAT instance in a public subnet in your VPC instead of a ______. However, a ______ is a managed NAT service that provides better availability, higher bandwidth, and less administrative effort. For common use cases, AWS recommends that you use a ______ instead of a NAT instance.

A

network address translation (NAT) gateway

63
Q

What does AMI stand for?

A

Amazon Machine Images

64
Q

What does IOPS stand for?

A

Input/Output Operations per second

65
Q

Amazon _____ is a fully managed container orchestration service that helps you easily deploy, manage, and scale containerized applications. It simplifies the deployment, management, and scaling of Docker-based applications in containers across a cluster of EC2 instances, offering flexibility through various launch types and autoscaling capabilities.

_____ integrates with both AWS tools, such as Amazon ______ Registry, and third-party tools, such as Docker, making it easier for teams to focus on building applications rather than managing the environment.
It supports running and scaling container workloads across AWS Regions in the cloud and on-premises without the complexity of managing a control plane.

A

Elastic Container Service (ECS)

66
Q

______, often abbreviated as K8s, is an open-source platform designed to automate deploying, managing, and scaling containerized applications. It was originally designed by Google and is now maintained by the Cloud Native Computing Foundation. ______ simplifies the management of containerized applications by automating tasks such as deployment, scaling, and operations, making it easier to manage workloads across clusters of servers.

______ assembles one or more computers, either virtual machines or bare metal, into a cluster which can run workloads in containers. It works with various container runtimes, such as containerd and CRI-O, and is suitable for running and managing workloads of all sizes and styles.

The ______ control plane manages the cluster’s workload and directs communication across the system. It consists of components like the API server, scheduler, and controllers, which handle tasks such as scaling, scheduling, and maintaining the desired state of the cluster.

______ supports a dual IPv4/IPv6 stack for network connectivity, enabling communication between services within the cluster and from outside the cluster. Each pod in ______ has a unique IP address, allowing them to communicate with each other and with external services.

______ is widely adopted due to its ability to accelerate and simplify the application release lifecycle, enable workload portability across different cloud environments, and support microservices architecture, which enhances business agility.

______ =Automated Deployment+Scaling+Management of Containerized Applications

A

Kubernetes

67
Q

______ is a fully managed Kubernetes service provided by AWS that simplifies the process of building, securing, operating, and maintaining Kubernetes clusters on AWS. With ______, you can easily deploy and manage containerized applications using Kubernetes without needing to install, operate, or manage your own Kubernetes control plane. ______ integrates with core AWS services such as CloudWatch, Auto Scaling Groups, and IAM to provide a seamless experience for monitoring, scaling, and load balancing your containerized applications.

______ is built on Kubernetes, an open-source platform designed to automate deploying, scaling, and managing containerized applications. ______ automates the management of the Kubernetes control plane, which includes the API server, etcd, controller manager, and other components, ensuring high availability across multiple Availability Zones.

In addition, ______ supports running Kubernetes applications on both Amazon EC2 compute instances and AWS Fargate, a serverless compute engine for containers that removes the need to manage servers or clusters.

A

Amazon Elastic Kubernetes Service (Amazon EKS)

68
Q

What does AWS EKS stand for?

A

Amazon Elastic Kubernetes Service

69
Q

AWS is a service offered by Amazon Web Services (AWS) that simplifies the deployment and scaling of web applications in the cloud. It automatically handles the provisioning of necessary resources, load balancing, scaling, and monitoring, allowing developers to focus on writing code rather than managing infrastructure details.
______ supports various programming languages including Java, .NET, PHP, Node.js, Python, Ruby, Go, and Docker, making it versatile for different development needs.

A

Elastic Beanstalk

70
Q

What does Amazon RDS stand for?

A

Relational Database Service